Migros wins 2025 DigiCert award for quantum security readiness

Migros has been named as the winner of the 2025 DigiCert Quantum Readiness Award, with NTT DATA recognised as a finalist for its efforts in preparing for quantum-era cybersecurity threats.

The DigiCert Quantum Readiness Awards are held to acknowledge organisations that have taken proactive measures to address the security implications of quantum computing. As quantum technology advances, it presents a risk to existing cryptographic systems, necessitating early action from major enterprises.

Migros approach

Migros, a retailer based in Switzerland, received the top award in recognition of a comprehensive, company-wide strategy for quantum readiness. This includes the establishment of a centre of excellence and a goal to achieve quantum readiness by 2030. Migros has opted for a risk-based methodology, focusing on securing new assets and prioritising legacy assets according to the sensitivity of their data. The organisation has also committed to implementing hybrid cryptography and strong governance, with sustained executive involvement and enterprise-wide action.

"At Migros, we view quantum readiness as a natural extension of our commitment to protecting customer trust," said Lukas Ruf, Group Chief Security & Risk Officer at Migros. "By establishing a centre of excellence, adopting hybrid cryptography, and embedding detailed governance requirements, we are ensuring our systems evolve securely and sustainably. This recognition underscores the proactive role of our leadership, security teams, and stakeholders in preparing not just for today's threats, but for the quantum challenges of tomorrow."

NTT DATA finalist recognition

NTT DATA was selected as a finalist in the awards for its incorporation of quantum readiness throughout its insurance services platform. The company has undertaken comprehensive work in cryptographic visibility, using DigiCert Trust Lifecycle Manager to inventory certificates and assess which long-lived and sensitive data flows might be at risk from possible Harvest-Now, Decrypt-Later attacks.

The company practices crypto-agility on a broad scale, with 47-day certificate lifecycles to rehearse rapid rotation and automation in anticipation of adopting post-quantum cryptography (PQC). Systems are designed for hybrid cryptography across multiple cloud environments, including AWS, Azure, and Google Cloud, and NTT DATA has also shared its best practices with the wider sector.

"At NTT DATA, we recognised that quantum readiness could not be left to chance, it had to become an operating discipline," said KAMODA Hiroaki, Head of Security & Network, NTT DATA Japan. "From building full cryptographic visibility to rehearsing agility with short-lived certificates and designing hybrid cryptography across multi- and sovereign clouds, we are embedding quantum readiness into the core of our services. This award reflects the commitment of our teams and our ecosystem partners to ensuring our customers can move with confidence into a post-quantum future."

Selection process

The 2025 honourees were chosen by a panel comprising figures from the cybersecurity and cryptography industries: Blair Canavan, Director of Alliances for the PQC Portfolio at Thales; Tim Hollebeek, Vice President of Industry Standards at DigiCert; Dr Ali El Kaafarani, Chief Executive Officer at PQShield; Bill Newhouse, Cybersecurity Engineer and Project Lead at the National Cybersecurity Centre of Excellence, NIST; Alan Shimel, Chief Executive Officer at TechStrong Group; and Hugh Thompson, Chairman at RSAC.

Quantum computing, according to the panel, both enhances computational capability and, conversely, brings new risks to established digital security protocols. The efforts of both Migros and NTT DATA were cited as examples for the wider sector.

"Quantum computing represents both a significant advance in computational capability and a corresponding threat to the cryptographic assets that underpin digital security," said Tim Hollebeek, Vice President of Industry Standards at DigiCert and Quantum Readiness Award judge. "NTT DATA's emphasis on operationalising agility and hybrid cryptography, and Migros's governance-driven approach with strong executive alignment, illustrate two rigorous and practical models of preparation. Both organisations provide concrete examples of what effective quantum readiness looks like in practice and set a useful benchmark for the rest of the industry."

Industry outlook

The DigiCert Quantum Readiness Awards highlight organisations that have actively prioritised quantum security in their operational and business practices. Although many companies are not yet prepared for potential quantum threats, Migros and NTT DATA are cited by DigiCert as demonstrating practical approaches other organisations can consider.